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resources  (and  toxins)  to  manufacture  and  less  power  to 
run.  And  thayVe  aasiar  to  rehshish  or  recycle. 
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Too  Many  Enemies 


My  suggestion  in  last  week’s  column  that 
U.S.  companies  should  be  allowed  to  compete 
in  Cuba  hit  a  raw  nerve  with  some  readers  who 
read  the  suggestion  as  some  sort  of  endorse¬ 
ment  of  the  Castro  regime. 


One  who  summed  up 
my  position  as  “left-wing 
bioney”  seemed  to  speak 
for  a  lot  of  readers  wto 
commented  on  the  article. 

What  had  gotten  me 
thinking  about  Cuba  was 
an  interview  I’d  conducted 
with  Allison  Watson, 


;d  that  Watson  said 
5  outside  of  the  U.S. 
zes  the  Cuban  gov- 


the  U.S.  Attorney's  Office 
for  the  District  of  Colo¬ 
rado  announced  that  it 
was  charging  Platte  River 
Associates,  a  Boulder  soft 
ware  company,  with  “trad 
ing  with  the  enemy."  That 
“enemy”  is  Cuba. 

The  feds  allege  that  in 


newspaper  in  Boulder, 
attorney  Lee  Foreman 
explained  that  Platte 
River  sold  the  software  to 
Repsol,  a  petroleum  com¬ 
pany  in  Spain.  A  Repsol 
employee  subsequently 
went  to  Boulder  for  train- 


bean  and  Cuba,  the  Daily 
Camera  reported,  based  on 
Foreman’s  explanation. 

Citing  the  Daily  Camera 
report,  Clif  Bums  made  an 
excellent  point  in  the  Ex- 
portLawBlog.  “Platte  River 
sold  software  to  a  Spanish 
company  that  then  fed  data 


criticized  outside  of  the 
U.S.  The  Ust  would  in¬ 
clude,  but  not  [be]  limited 
to,  the  U.N,  the  EU,  Mexi¬ 
co,  Spain  and  France.” 

Yet  as  all  too  often 


■  Our  government 
opposes  those  in 
auttiorityinCuba, 
and  with  good 
reason.  But  is  the 
nation  really  our 
enemy? 


On  July  15,  that  if  this  company  or  any  willing  to  do  the  difficult. 

company  violates  U.S.  law.  We  have  too  many  en- 
it  should  be  punished.  The  emies  as  it  is.  ■ 

Bmment  Uw  is  the  law.  My  concern  Don  Tamant  is  editorial 

lose  in  i*  that  there  appears  to  be  director  0/  Computerworld 

n  Cuba.  aprosecutorlioverzeal-  and  InfoWorid.  Contact 

him  at  don_tennant@ 
computerworld.com,  and 
visit  his  biog  at  httpy/ 
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How  Do  You 
Premium  3-F 
Technology  at 
Lower  Cost? 


By  Choosing  Tripp  Lite,  You  Receive  Superior  Performance 


and  Advanced  Features— Typically  at  a  Savings  of  10%-25%! 


To  find  the  right  3-Phase  UPS  System  for  your 
application,  go  to  tripplite.com/3phase 
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Short 

lakes 


Slock  ExdiangesSlart 
INnking  in  Microseconds 


IN  THE  machine^rs.- 
machine  world  of  finan¬ 
cial  trading,  where  IT 
is  constantly  trying  to 
increase  performance, 
transaction  times  are  now 
being  measured  in  incre¬ 
ments  of  microseconds. 

Over  the  past  year,  for 
example,  the  New  York 
Stock  Exchange  and  CME 
Group  Inc.,  which  operates 
the  Chicago  Mercantile 
Exchange  and  the  Chicago 
Board  of  Tirade,  have  begun 
to  frame  their  thinking 
in  units  of  microseconds 
as  they  iook  for  ways  to 
improve  their  transaction¬ 
processing  throughput. 

“It’s  all  at  the  microsec¬ 
ond  level  right  now,”  said 
Steve  Rubinow,  CIO  at 
NYSE  Euronext  Inc.,  which 
operates  the  NYSE  and  the 
Amsterdam-based  Euro¬ 
next  stock  exchange. 

Thanks  to  improvements 
in  hardware,  networking 
and  trading  algorithms,  the 
time  it  takes  exchanges  like 
the  NYSE  and  the  CME 
to  complete  transactions 
is  heading  into  the  single- 


iot.  A  microsecond-level 
performance  improvement, 
multiplied  across  systems 
that  are  processing  mil¬ 
lions  of  transactions  per 
hour,  can  quickly  add  up  to 
a  competitive  advantage. 

“We  got  pulled  into  it,” 
John  Hart,  CME’s  manag¬ 


ing  director  of  technology 
engineering,  said  of  mea¬ 
suring  in  microseconds. 

And  as  the  performance- 
measurement  levels  get 
finer,  the  IT  staffs  at  the 
exchanges  are  trying  to 
eke  out  improved  response 
times  by  upgrading  inter¬ 
connects,  tweaking  oper¬ 
ating  systems  and  testing 
new  systems. 

For  instance,  CME  is 
already  piloting  the  first 
blade  server  version  of 
Hewlett-Packard  Co.’s 
Nonstop  fault-tolerant 
systems  technology.  Hart 
said  the  blade,  which  HP 
announced  in  June,  offers 
twice  as  much  throughput 
as  earlier  NonStop  models. 

Rubinow  recently  met 
with  a  representative  from 
a  storage  maker  who  told 
him  a  new  system  could 
deliver  “submillisecond" 
response  times.  Rubinow 
asked,  “Do  you  mean  900 
microseconds  or  100  micro¬ 
seconds?  Because  that’s  a 
world  of  difference  to  us." 

The  rep  said  he  wasn’t 
sure  and  hadn’t  been  asked 
that  question  before.  “Well, 
get  used  to  it,”  Rubinow 
responded,  “because  every¬ 
body  in  this  industry  is  go¬ 
ing  to  ask  that  question.” 

—  Potrick  Thibodeau 
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HARDWARE 

Microsoft  Offers  Glimpse  of 
Its  New  Sphere  Computer 


MCROSOR  CORP.  shoMd  off 
Hs  new  Spharo  compular  bst 

WMk. 

ThamacMna.wtdciiwisfBB- 
tind  at  the  VMidar%  Rnowdi 
FaadtySunmHinRMhiKiiid. 
Wash.,  1$  sai  a  maardi  proto¬ 
type.  H  uws  a  touch-acnan 
tub  fewtaad  o<  a  tradWonai  lla^ 


and  an  bifiarad  camera,  noted 
HiwiiaBanko.alffcroioftRe- 
saarrthumaif-camputarintar- 
aclion  spadalat,  in  a  Hog  post 
Mcroaoft  angbiaars  haae  so 
far  dewalopad  a  picture  and 
yidao  browser,  as  wal  ae  three 
appicatione  for  the  system. 

"irs  importMt  in  that  someone 
is  spandbig  lime  and  monay  to 
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Vbtif  potential.  Our  passion. 

Microsoft 


Dell.com  is  one  of  the  world's  largest  and  most  advanced  e-commerce 
sites.  As  a  technology  leader,  Dell  relies  on  Windows  Server* 2008 
for  the  flexibility  and  reliability  needed  to  support  a  mission-critical 
environment  where  downtime  is  not  an  option.  Get  the  full  story  at 

serverunleashed.com 

*  %  Windows  Server  2008 
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When  40  million  customers  show  up  ut  Dell.com,  f  * 

who  helps  greet  them  at  the  door? 


NASA  Archive  Project 
Puts  Historic  images  (Mine 
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Their  computer. 
Your  brain. 

GoToAssist  Express  lets  you  view  and  control  your 
customer’s  computer  online,  so  you  can  use  your 
expertise  to  fix  the  problem  yourself.  Resolve  the  issue, 
keep  your  customer  satisfied  and  move  on  to  the  next 
task.  Support  smarter  with  GoToAssist  Express. 

Try  it  free  for  30  days  at  gotoassistcom/computer. 
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Data  Explosion  Forcing  IT 
To  SeekT<ew  Backup  Tools 


Managers  must  carefully 
consider  the  consequences 
of  quickly  switching  vendors 
to  get  the  right  technology. 

By  Brian  Fonseca 


Inc.  (ESG),  more  than  half 
of  the  respondents  said  that 
they  have  changed  primary 
backup  suppliers  over  the 


analyst  firm,  noted  that  agers  should  evaluate  it  t 
uid  more  IT  managers  least  once  a  year  to  be  su 
infiilly  realizing  that  that  it  is  keepit^  up  with 


rforming  backup  tools 
n't  handle  shrinking  back 
I  windows  and  the  compk 


data  growth  and  security 

Dave  McEldowney,  divi¬ 
sion  vice  president  of  IT  at 


corporate  world  is  fbrcii^  the  research  firm 
IT  managers  to  constantly  In  a  Gartner  survey  of 

be  on  the  lookout  for  new  70  IT  managers  last  month, 

equipment  that  can  handle  66%  of  the  respondents  said 
perpetually  evolving  re-  that  they’re  planning  major 

quirements.  redesigns  of  backup  and 

According  to  analysts  at  recovery  systems  within 

Gartner  Inc.,  there  appears  12  months,  according  to 
to  have  been  a  significant  Dayley. 

increase  in  corporate  users  Meanwhile,  in  a  survey 


management  needs  of  their  Bar-S  Foods  Co.,  said  the 

ever-growing  data  stores.  meat  processor  and  dis- 

Many  companies  are  tributor  evaluated  the  secu- 

looking  to  quickly  install  rity  risks  before  deciding  to 

products  that  offer  relatively  replace  its  Galaxy  backup 
new  features  such  as  data  software  firom  CommVault 
de-duplication  and  the  abil-  Systems  Inc.  last  year, 
ity  to  perform  incremental  He  said  the  company  de- 
and  continuous  snapshots  of  termined  that  the  benefits 
virtual  disks.  of  changing  vendors  out- 
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I  Sexiest  Gadget 
title.  But  in  the 
pragmatic  world  of  corpo¬ 
rate  IT,  the  flashy  new  hand¬ 
held  is  no  pinup. 

That  was  the  case  when 
Apple  Inc.  introduced  the 
iPhone  3G  two  months  ago. 
And  it’s  even  more  so  now 
that  IT  managers,  indepen¬ 
dent  software  vendors  and 
analysts  can  actually  get 
their  hands  on  the  device. 


Not  There  Yet: 
The  iPhone 
Has  Some 
Growing  to  Do 


But  without  native  en¬ 
cryption,  the  device  wot 
be  used  in  public-safety 


problems  with  the  process 
of  loading  applications  onto 
iPhones,  he  plans  to  store 


via  the  device’s  browser. 

App  deployment  is  an  is¬ 
sue  because  of  the  need  to 
use  iTunes  and  Apple’s  new 


fled,  evaluated  the  iPhone 
3G  but  decided  not  to  deploy 
it,  citing  configuration  and 
security  weaknesses  as  well 
as  shortcomings  in  tech  sup¬ 
port  and  even  usability. 

For  example,  basics  such 
as  the  ability  to  quickly 
search  e-mail  and  edit  cal¬ 
endar  entries  are  missing, 
the  manager  said,  adding 
that  IT  concerns  include  the 
lack  of  native  encryption 
capabilities  and  support  for 


Apple’s  new  3G  model  still 
lags  behind  BlackBerry 
and  Windows  Mobile  devices 
for  corporate  IT  apps. 

By  Eric  Lai  and  Matt  Hamblen 


policies  for  enforcing  secu-  IPhone  2.0  also  uses 
rity  and  other  IT  settings.  Exchange  ActiveSync,  but 
Microsoft  is  trying  to  many  of  the  features  sup- 

catch  up  to  RIM  with  its  ported  by  Microsoft  aren’t 
System  Center  Mobile  De-  there,  including  the  ability  to 


available  for  the  iPhone, 
that  is  still  far  less  than  the 
18,000  and  4,000  apps  that 
can  be  had  for  Windows  Mo¬ 
bile  and  BlackBerry  devices, 
respectively,  at  Web  store¬ 
fronts  like  Handango.com. 

Lifetime  Products  Inc., 
which  makes  tables,  chairs, 
sheds  and  other  products, 
has  390  employees  using 
Windows  Mobile  smart 
phones.  The  pressure  to 
support  iPhones  is  “al¬ 
ways  there,”  said  CIO  John 
Bowdea  But  Lifetime  nms 
a  Microsoft-based  workflow 
application  i 


preset  policies  as  part  of  the  ogy  officer,  has  bought  10  of  stand  the  benefits  they  can 

ActiveSync  implementation  the  new  iPhones  for  testing.  get  from  such  apps,  Bowden 

in  Exchange  Server  2007  The  3G  could  provide  “the  said,  “the  allure  of  the 

Service  Pack  1.  dream  convergence  we’ve  iPhone  fades  very  quickly.”  I 


For  you,  it’s  a  problem  you  didn’t  see 

For  your  business,  it’s  a  customer 
you  won’t  see  coming  back. 


Liebert  flexibility  EMERSON 

Network  Power 


EMERSON.  CONSIDER  IT  SOLVED. 


CIOs  Morph  Into  CIMs 


lOs  ARE  perfectly  positioned  to  become  the  carbon 
information  managers  as  well  as  the  IT  leaders  for  their 
organizations.  ■  Just  what  your  department  needs:  more 
work.  ■  Carbon  information  managers  will  play  “an 
^  emerging  role”  in  the  modem  enterprise,  according  to  a 
report  released  last  month  by  the  U.K.'s  Carbon  Disclosure  Project 
and  IBM.  CIMs  will  lead  the  push  to  define  how  businesses  measure 


their  carbon  footprints  and  oversee 
the  projects  that  are  needed  to  re¬ 
duce  those  footprints. 

And  have  no  doubt  that  it  will  be 
your  company’s  goal  to  reduce  its 
production  of  greenhouse  gases,  the 
report  says.  Not  just  to  curb  the  rate 
of  growth  of  production,  but  to  make 


goals,  some  of  them  calling  for  as 
much  as  a  50%  reduction  by  2020. 

Leading  a  companywide  effort 
to  cut  greenhouse  gas  production 
is  fraught  with  challenges,  Hodges 
acknowledges.  Risk-averse  CIOs  will 
be  leery  of  the  task. 

But  who  else  in  the  organization, 
he  asks,  has  insight  into  as  many 


employees  are  of  phishing  and  then 


ting  hooked  by  phishers. 

Aaron  Higbee,  chief  technology 
officer  at  Intrepidus,  says  identity 
thieves  have  moved  beyond  target¬ 
ing  PayPal  and  eBay  users  and  are 
now  training  their  sights  on  corpo¬ 
rate  workers  with  what  are  called 
spearphishing  attacks.  In  these  at¬ 
tacks,  official-looking  e-mails  ask  re¬ 
cipients  to  do  things  such  as  update 
their  401(k)  information,  with  the 
intent  of  stealing  the  data,  and  pos¬ 
sibly  the  funds. 

Worse,  from  an  IT  security  per¬ 
spective,  are  spearphishing  mes- 


— '  test  their  pass 
ords  by  clicking  on  a  link. 

Belani  says  you  can  run  the  tests 


Objects 

an  SAP  compan\ 


RUSHED? 

Work  Less.  Deliver  More. 


Rush  me  your  30-Day.  FREE  Trial 
of  Crystal  Reports  Server  2008.  Call 
us  today!  1.888.229.2276  Or.  visit 
WWW. businessobiects.com/workless 

CRYSTAL  REPORTS 

SERVER 


H  yHF  ADII  I  become  obsolete  within  nine  or  10 

■  inCUniLL  ,  months.  People  who  depend  on  putting 

i  _T|  Dell  laptops  into  larger  critical  systems 

Ijfxrpijr  :  are  stuck  wUh  the  same  problem.  The 

X  V^L-Vi-cL  vJd-llvJJLyv/l- A  A  laptops  they’ve  bought  are  not  support- 

,  .  11  1  '  ed  for  more  than  three  years,  and  they 

An  obsolescence  expert  talks  about  ■  may  be  putting  them  mm  a  system  that 

.■■.a  ■■  '  [must  be]  maintained  for  2S  years. 

anticipabng  obsolescence,  dealing 

with  it  and  understanding  that  it  is  ;  TheroocoflheptoblemistJiaviM,- 

partofMicrosoffs  business  plan.  i 


COMraTERWOiLD  AUGUST  4.: 


We'll  help  you  get  more  with  a  multifunction  printer. 
Like  office  space,  for  example. 
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The  Right  Technology.  Right  Away. 


■  THE  GRILL  PETER  SANDBORN 


really  a  business  plan 
to  ki^  the  level  of 
need  high  enough  that 
companies  grow. 


Continued  from  page  16 
is  another  good  example.  They  have 
to  be  sustained  for  30  years,  maybe 
more.  You  can’t  just  change  things  in 
those  systems  without  putting  a  lot 
of  thou^t  and  work  into  it,  because 
those  are  h^hly  qualified  and  certi¬ 
fied  systems.  These  systems  can  have 
qualification  processes  that  run  tens  of 
millions  of  dollars.  It’s  very  expensive 
to  change  anything. 

WlMl  m  Km  HMVMM  af  Mhil  to 


plan  for  sbsoiasGancs?  If  you  have  to  re¬ 
fresh  the  design  of  a  system,  you  have 
to  go  back  through  some  portion  of  the 
qualification.  It  can  get  quite  expen¬ 
sive.  I  worked  on  a  GPS  radio  for  an 
Army  helicopter,  and  if  you  changed  the 
hardware  such  that  it  changed  a  single 
line  of  the  software,  it  was  an  automatic 
requalification  of  the  helicopter. 

iTiere  also  can  be  a  cost  in  avail¬ 
ability  of  the  system.  If  you're  flying 
airplanes  in  Iraq,  you  may  have  to 
retire  a  perfectly  good  aircraft  so  you 

can  rob  it  for  parts  to  keep  the  other 

onesgoii^. 

What’s  tbs  altsmalhn?  If  you  forecast 
the  lifetime  of  the  parts  early,  you  can 
strategically  plan  refreshes  to  deal 
with  the  problems  and  figure  out  what 
the  optimum  refresh  frequency  is. 

Bivan  si  of  tilt  uncsrtaintlss,  can  you 
rtaHy  pradtet  that  aecurataly?  This  is  a 
decision-making-under-uncertainty 
problem.  [The  tool  we  developed] 
does  simulations  to  handle  all  of  the 

uncertainties:  in  the  costs  of  resolving 

things,  in  the  dates  when  something  is 
expected  to  go  obsolete,  in  how  many 
spares  you’re  going  to  need.  It  looks  for 
a  solution  that  is  good  in  the  context  of 
all  of  the  uncertainties. 

How  can  IT  organbatiana  praaarva  thair 
tachnalogy  bnastmanls?  Planning  is 
king.  You  can  certainly  piggyback  on 
the  sort  of  mitigation  approaches  that 
people  use  for  avionics,  which  work 
reasonably  well  in  hardware  situations. 
Either  you’re  going  to  have  to  find  an 
aftermarket  supply  chain  or  make  life¬ 
time  buys  and  keep  the  replacements 
in  inventory.  For  a  small  volume  of 
things,  you  can  make  final  orders  and 
store  parts. 

The  other  thing  people  can  do  is  try 
to  consolidate  demand  and  inventory. 
When  a  part  goes  obsolete.  I’m  not  the 
only  person  who  needs  it.  What  people 
find  is  that  I  need  a  couple  of  them, 
the  guy  in  the  next  building  needs  a 
couple  of  them,  and  there’s  a  guy  in  a 
branch  in  Germany  that  has  10  that  I 
never  knew  existed.  There  are  parts 
out  there,  if  you  can  just  link  up  the 
people. 

How  hm  ragutaUom,  ueh  as  tht  EU  bM 


on  tbs  use  of  lead  toMsr,  txacsrfaalsd  tbs 
obioloscoiies  proUam?  The  EU  ban  is 

called  RoHS,  Restrictions  on  Hazard¬ 
ous  Substances.  You  can’t  have  lead  in 
solder  anymore.  It  has  made  the  entire 

supply  chain  move  to  lead-free  parts. 

In  one  fell  swoop,  you  made  obsolete 
all  tin  lead  solder  parts,  and  now  you’re 

A  lot  of  systems  that  IT  folks  have 
use  tin  solder  parts.  If  you  need  to  fix 
one  of  those  boards,  you  may  have  to 
use  a  lead-free  part.  Now  you’re  assem¬ 
bling  a  lead-free  solder  part  onto  a  tin 
lead  soldered  board,  and  people  ques¬ 
tion  the  reliability  of  that. 

Then  you  have  the  tin  whiskers  that 
can  grow  and  wipe  systems  out 

Tin  wbisktrs?  Yes.  Traditional  solder  is 
lead  and  tin.  When  you  add  lead  to  tin, 
it  [grows]  these  sin^e  crystal  whiskers 
over  time.  They  can  be  millimeters 
long,  and  they’ll  short  things  out  A 
couple  of  satellites  have  been  lost  due 
to  tin  whiskers.  It’s  hard  to  understand 
how  to  stop  it  It’s  just  an  example  of 
the  kind  of  problems  you  get  into. 

b  nim  of  fbii  obnlewnn  fai  tb*  IT  mar¬ 
ital  planned?  We’re  all  trapped  in  this 
problem  of  "I  have  Office  200S,  and  I’m 
fine  with  Office  2005.  It  does  more  stuff 
than  I’m  ever  going  to  use.”  But  darned 
if  documents  don’t  start  showing  up 
that  I  can’t  open  in  Office  2005  because 
someone  made  them  in  Office  2007. 
Pretty  soon,  I  get  fed  up  with  this  and 
I’m  forced  to  upgrade.  I’m  stuck  in  this 
cycle  of  needing  to  upgrade  because  the 
world  pushes  on  and  pretty  soon  I  can’t 
function,  even  though  I  don’t  need  the 
new  stuff.  We’ve  called  this  the  Micro¬ 
soft  business  plan. 

If  this  wasn’t  happening,  how  would 
Microsoft  stay  in  business?  Their 
whole  stock  value  is  predicated  on  the 
idea  that  everybody  needs  a  machine 
upgrade  and  a  software  upgrade  at 
some  average  firequency.  If  they  didn’t. 
Microsoft  couldn’t  grow,  let  alone  stay 
the  same  size. 

A  lot  of  planned  obsolescence  is  re¬ 
ally  a  business  plan  to  keep  the  level 
of  need  high  enough  that  companies 
grow.  They’re  strategizing  on  “How  do 
we  force  people  to  continue  to  upgrade 
their  version?"  And  they’re  good  at  it 
-  Interview  by  IMart  L  Mllchdl 
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Why  the  iPhone  Is 
Apple’s  Trajan  Horse 


APPLE’S  NEW  iPhone  3G  arrived  a  few  weeks  ago. 
Did  you  miss  the  news?  Not  likely.  It  was  every¬ 
where.  There  were  rave  reviews  about  the  new 
hardware  and  features,  all  deUvered  at  a  much  low¬ 
er  price  than  the  original  iPhone  (see  related  story,  page  12). 


The  more  interest¬ 
ing  news  for  enterprises, 
though,  involves  the  new 
iPhone  and  iPod  Touch 
2.0  software  that  comes 
insulled  on  the  3G  phone 
and  is  also  available  for  the 
first-generation  devices. 
That’s  because  the  iPhone 
is  a  now  a  bona  fide  soft¬ 
ware  platform. 


base,  something  north  of  a 
million  units.  And  vendors 
usually  can’t  get  to  that 
level  very  easily  without 
third-party  applications 
to  back  up  their  own 
software  offerings.  Apple 
broke  this  logjam  by  pro¬ 
ducing  a  device  that  was 
different,  and  sexy,  enough 
to  make  millions  of  people 


tools  to  let  IT  managers 
remotely  configure  and 
control  iPhones  on  their 
networks.  In  combination 
with  Exchange  syncing, 
that  should  allow  Apple  to 
make  new  inroads  into  the 
enterprise,  with  the  iPhone 
acting  as  a  Trojan  horse 
for  other  Apple  devices 
and  services.  IT  depan- 


the  most  from  the  platform. 
And  who  knows  how  cor¬ 
porate  developers  will  take 
to  the  platform  for  line-of- 
business  applications? 

By  the  way,  if  you  re¬ 
ally  didn’t  see  any  of 
those  iPhone  3G  reviews. 

I  can  tell  you  that  it’s  still 
a  handsome  device  with 
good  hand  feel  despite  the 
replacement  of  the  metal 
backing  with  plastic.  The 
3G  speed  is  impressive, 
and  GPS  has  worked  well 
for  me  in  northern  New 
Jersey.  Sound  is  excellent, 
a  notable  improvement 
over  the  first  generation. 

Battery  life  remains  far 
from  stellar.  But  that’s  the 
thing  about  smart  phones: 
We  love  to  have  them  load¬ 
ed  with  features,  but  those 
features  severely  cut  into 
battery  life.  A  removable 
battery  would  be  nice,  but 
I’ve  learned  to  live  with 


-ercome  a  hurdle  -  a  g  fj  departments, 
of  natur^  catch-22  ^ 

I  make  their  products  Rouiant 

platforms.  Develop- 

L’tbotherwitha  of^geelis  beaimg 


large  influx  of  venture  cap¬ 
ital  to  fund  the  ecosystem. 

Eventually,  developers 
will  greatly  add  to  what 
the  iPhone  can  do  in  ways 
that  will  attract  both 


re  things  will  only  heat 
as  developers  really 
ut  to  learn  how  to  get 


president  and  research 
director  for  the  personal 
technology  and  access  anc 
custom  research  groups 
at  JupiterResearch  in 
New  York.  Contact  him  at 
mgartenberg@optonline. 
net.  His  weblog  and  RSS 
feed  are  at  httpy/weblogs 
jupiterTesearch.com/ 
analysts/gartenberg. 
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Cloud  comDuting  is  changing  the  way 
wethinkofthelTdepaitnient. 

mi  ONATHAN  SNYDER’S  five-person 
team  at  Dreambuilder  Invest- 
ments  LLC  isn’t  your  typical  IT 
organization.  Or  is  it? 

The  New  York-based  company, 
which  buys  and  sells  defaulted 
residential  mortgages,  uses  Sales- 
force.com  Inc.’s  Force.com  as  its 
financial  services  platform.  It 
backs  up  data  using  EMC  Corp.’s 
hosted  MozyPro  service.  Dreambuilder’s 
server  is  hosted  by  RackForce  Networks  Inc. 
in  Canada,  and  its  e-mail  is  handled  by  App- 
tix  Inc.,  a  hosted  exchange  in  Herndon,  Va. 

Exchange  server,  let  them  do  that,"  he  says. 

It’s  not  just  small  to  midsize  businesses  that 
are  following  Snyder’s  lead.  By  2013,  at  least 
one-fifth  of  enterprise  IT  workloads  will  be 
managed  in  cloud  computing  environments, 
according  to  Mike  West,  an  analyst  at  Sauga- 
tuck  Technology  Inc.,  a  boutique  consulting 
firm  in  Westport,  Conn.  He  says  that  big 
companies  are  increasingly  handing  over  their 

IT  infrastructure  activities  to  traditional  IT 
services  providers  such  as  IBM,  Hewlett- 
Packard  Co.  and  even  recent  maricet  entrants 
like  Amazon.com  Inc.  and  Boomi  Inc.  The 
goal  is  to  lower  their  costs,  access  enhanced 

five-year-old  company  that  lacks  the  IT  infra¬ 
structure  that  a  typical  Fortune  1,000  enter¬ 
prise  has  built  up  over  decades.  But  as  Chief 
Technology  Officer  Jonathan  Snyder  sees 
it,  his  firm’s  core  business  is  mortgages,  not 
server  maintenance  and  disk  backups.  “If  it’s 
somebody  else’s  core  business  to  handle  an 

and  reduce  their  data  center  footprints. 

Moreover,  building  or  installing  commod¬ 
itized  applications  or  IT  infrastructure  sei^ 
vices  that  don’t  provide  competitive  advan- 

the  past  few  years,  says  John  Dutra,  CTO  at 
Continued  on  page  22 

Careers  in  the  Cloud 

tT  organizatkins  that  shm  a  good  part  of  their  rr  infrastructure 
to  horted  service  prtwirlers  over  the  nert  decatle  will  Miety  see  profoiind 
changes  in  the  makeup  and  skills  of  their  remaining  IT  staffers. 

“There's  a  limited  number  of  resources  in  IT.“  notes  John  Dutra, 
CTO  of  Sun  rr.  a  division  of  Sun  Microsystems.  “Wouldn't  I  want  to 
focus  them  on  the  most  strategic  areas  possible?' 

On  the  path  toward  utility  computing,  IT  leaders  will  need  to 
develop  and  attract  paopla  with  transitional  skills.  For  instance, 
compmiies  that  aggressively  pursue  hosted  fT  services  may  wind 
up  creatbtg  software-as-a-service  task  forces  to  devise  new  ways 
of  provkfing  support  to  business  users,  says  Mike  West,  an  analyst 
at  Saugatuck  Technology.  And  as  companies  cobble  together  a  mix 
of  premises-based  and  hosted  applications,  systems  integration 
expertise  will  come  to  the  fore,  whether  provided  by  internal  staffs  or 
outsourcing  providers.  West  adds. 

Nevertheless,  large  companies  will  still  need  to  have  IT  organiza¬ 
tions  that  are  •\ery  deep  in  the  business  -  people  who  have  vendor 
refathmship  management  skills,  who  can  help  the  [managed  service 
provider]  or  outsourcer  to  understand  how  to  facilitate  the  business." 
says  Robert  Keefe.  CIO  at  Mueller  Water  Products.  To  play  that  role, 
IT  staffers  wIN  have  to  knprove  their  vendor  negotiatian  skills,  says 
Rani  Krisavage.  aO  at  Wortd  Wrestfing  Entertainment  bw. 


Even  companies  that  outsource  the  bulk  of  their  IT  infrastructure 
support  win  still  need  in-house  technical  experts  who  understand 
how  everything  fits  together  and  works,  says  Beach  Clark,  CIO  at  the 
Georgia  Aquarium. 

And  since  most  hosted  services  will  be  accessed  using  Web  brows¬ 
ers  such  as  Internet  Explorer,  Firefox  and  Safari,  “somebody  in  the 
[customer]  company  will  have  to  deal  with  that  in  a  technical  fash¬ 
ion,"  says  Dutra. 

Once  the  transition  is  well  under  way,  expect  to  see  an  increase  in 
the  number  of  people  with  vendor  relationship  management  skills, 
says  Paul  Major,  managing  director  of  fT  at  Aspen  Skiing  Co.  But  the 
people  who  end  up  hlling  those  posts  might  be  “superusers"  and  not 
traditional  IT  staffers,  he  adds. 

Major  also  says  many  fT  pros  with  deep  technical  skills  in  areas 
such  as  network  management  will  probably  end  up  working  in  giant 
hosted  data  centers. 

Futurist  Thornton  May  agrees.  “I  think  the  human  capital  flow  Is 
going  to  change"  over  the  next  decade,  he  says. 

He  predicts  that  many  young  IT  workers  will  spend  the  hrst  10 
years  of  their  careers  working  for  managed  services  prov'iders  and 
then  move  into  middle  and  senior  management  positions  in  corporate 
IT.  “You're  basically  going  to  get  your  technology  chops  inside  the 
belly  of  the  outsourcing  beast."  May  says.  “And  some  subset  of  these 
people  will  migrate  over  to  their  customers." 

-  THOMAS  HOFFMAN 


Microsatt 


taking  on  man-eating 
plants,  easy. 


Know  your  leafy  enemy. 

What  changed  your  dusty,  dned-out  office 
plant  into  a  bloodthirsty  menace?  Will  you 
be  held  responsible  for  the  workloads  of 


taking  on  security 
threats,  easier. 


2.  Office  coffee. 

This  works  well  against  so  many  office  threats.  The  more  over- 
brewed,  reheated,  and  dirty-pot-prepared,  the  better  Two  pots 
and  it  s  over. 


3.  The  junk  food  attack. 

In  the  afternoon,  when  energy 
is  low,  raid  the  vending  machine 
and  fill  the  Man-Eating  Plant  with 
snacks,  chips,  cookies,  etc.  Puts  you 
right  to  sleep— the  Plant  too,  . 


1.  Implement  Microsoft  F< 

Forefront  makes  defending  your  systems  easier, 
it's  a  comprehensive,  simple-to-use,  integrated 
family  of  products  that  helps  provide  protection 
across  your  client,  server,  and  network  edge  For 
case  studies,  free  trials,  demos,  and  all  the  latest 
moves,  visit  easyeasier.com 


Forefront  is  business  security  software  for  client, 
server,  and  the  network  edge 


4.  Go  green. 

We  mean  literally.  Disguise  yourself  as  a 
)  plant— a  leafy  fern,  perhaps— to  escape 
carnivorous  Plant  scrutiny.  Helps  you 
**  escape  boss  scrutiny  as  well 


5.  Weed  spray. 

This  IS  generally  nasty  stuff 
weed  spiavs  on  tl>e  market 
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about  data  protection,  says  Nick 
Sharma,  senior  vice  president  of  infra¬ 
structure  managed  services  at  Satyam 
Computer  Services  Ltd. 

There  are  other  reasons  that  many 


As  a  greater  proportion  of  IT  activi¬ 
ties  is  hanrtled  externally.  CIOs  will 
see  their  roles  continue  to  morph, 
though  exactly  how  is  uncertain. 

"I  think  the  technical  CIOs  are  go¬ 
ing  to  migrate  over  to  these  hosted 
companies."  while  CIOs  who  are 
more  business-focused  will  continue 
to  work  alongside  their  business 
peers  within  customer  companies, 
says  Robert  Keefe,  president  of  the 
Society  for  Information  Management 
and  CIO  at  Mueller  Water  Products. 

Carmen  Malangone.  director  of 
IT  at  Coty.  foresees  more  dramatic 
changes  ahead  for  IT  leaders. 

"What  I  think  you'll  see  is  the  CIO 
role  dissolving."  while  IT  directors 
increasingly  work  one-on-one  with 
divisional  business  leaders,  he  says. 

If  he's  right,  that  kind  of  change  will 
likely  take  years  to  play  out. 

THOMAS  HOFFMAN 


QUICKSTUDY  ■ 


Cloud  Computing 

Users  can  hook  into  the  power  of ‘out  there.’ 

BY  RUSSCU  KAY  to  talk  with  one  another  and  platform.  For  enterprises 

Ask  any  five  balance  computing  loads.  with  huge  investments  in 

IT  specialists  Users  didn’t  care  which  existing  software  and  opera- 

what  cloud  CPU  ran  their  program,  and  tional  procedures,  this  has 

computing  cluster  software  managed  been  a  real  barrier  to  adop- 

is,  and  you’re  everything.  But  clustering  tion  of  these  shared  tech- 

likely  to  get  five  different  proved  to  be  difficult  and  nologies.  Other  significant 

answers.  That’s  partly  be-  expensive.  concerns  include  dau  secu- 


ANY  five  balance  computing  loads, 

specialists  Users  didn’t  care  which 

lat  cloud  CPU  ran  their  program,  and 

mputing  cluster  software  managed 

and  you’re  everything.  But  clustering 

different  proved  to  be  difficult  and 


with  huge  investments  in 
existing  software  and  opera¬ 
tional  procedures,  this  has 
been  a  real  barrier  to  adop¬ 
tion  of  these  shared  tech¬ 
nologies.  Other  significant 


throughout  the  cloud.  sity  of  California,  Berkeley 

—  are  participating  in  the 

WHERE  IT’S  OOINO  Google-IBM  program. 

If  cloud  computing  succeeds  Meanwhile,  Amazon.- 


INTHEBEOINNINO 

First,  there  were  mainframe 
computers,  then  minicom- 


One  problem  was  wiiere 
dau  was  stored.  Grid  nodes 
could  be  located  anywhere  h 


computers  became  physi-  significant  processing  delays  computing.  Their , 


Also,  grid  or  cloud  com¬ 
puting  means  users  and 
businesses  must  migrate 
their  applications  and  dau 
to  a  third  party  or  different 


Cluster  Computing  Initia¬ 
tive  began  when  a  Google 
software  engineer,  Chris- 
tophe  Bisciglia,  wanted  to 


a  pay-per-use  basis.  ■ 

Ibv  is  a  Computerworld  con¬ 
tributing  writer  in  Worcester, 
Mass.  You  can  contact  him  at 
russkay@charter.net. 
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Vendors  start  to 
design  IT  with 
Mother  Earth  in  mind. 

By  Mary  K.  Pratt 


HP  saw  potential  in  used  water  bottles. 

Hewlett-Packed  Co.  found  a  way  to  turn  those  old  bottles, 
along  with  other  types  of  recyclable  consumer  plastics,  into  ink¬ 
jet  printer  cartridges.  ■  In  fact,  HP  turned  more  than  5  million 
pounds  of  recycled  plastic  into  ink-jet  cartridges  in  2007 
and  plans  to  use  twice  as  much  this  year.  ■  The  project,  part  of 
HP’s  Design  for  Environment  program,  is  just  one  way  for  the 
company  to  meet  its  green  objectives,  says  Pat  Tieman,  vice 
president  for  social  and  environmental  responsibility.  ■  “More 
and  more  people  are  really  thinking  about  the  environment  in 
ways  they  hac^’t  before,”  he  says. 


says  Christopher  Mines,  an  anal 
Forrester  Research  Inc.  “The  in( 
has  made  great  strides,  and  cer' 
there  are  companies  that  take  ( 
for  the  environment  to  heart.” 

Tieman  points  to  the  initiativ 
HP  to  illustrate  the  point. 

The  company  has  a  commitm 
eliminating  toxic  polyvinyl  chlo 
(PVC)  and  brominat^  flame  ret 
dant  (BFR)  from  all  of  its  produi 
the  end  of 2009.  It  has  switched 
solvent-based  paints  to  more  em 
mentally  friendly  water-based  ty 
for  its  workstations  and  TVs.  Ai 
months  ago,'it  started  to  elir"'“' 


vironmental  policies  on  their  requests 
for  proposals.  In  fact,  the  number  of 
customers  asking  about  green  initia¬ 
tives  has  grown  by  more  than  150%  in 


REPORT  CARDS 

Customers  aren't  the  only  ones  tak¬ 
ing  notes.  Greenpeace  International 
has  taken  on  this  issue  in  its  quarterly 
“Guide  to  Greener  Electronics”  report, 
which  ranks  consumer  electronics 
companies  based  on  their  efforts  to 
reduce  toxins  in  their  products,  and 
on  their  programs  for  taking  back  and 
recycling  products.  The  June  2008 
report  for  the  first  time  considered  the 
manufacturers’  efforts  to  increase  their 
products’  energy  efficiency. 

That  report,  issued  June  25,  lists 
Sony  Ericsson  and  Sony  Corp.  as  lead¬ 
ers  among  the  18  companies  ranked. 
However,  the  report  gave  those  two  a 
score  of  just  over  5  on  a  scale  of  1  to  10. 
The  majority  of  the  ranked  companies 
fell  between  4  and  5. 

Despite  such  mediocre  marks,  the 
industry  has  made  strides  to  do  better 


Casey  Harrell,  a  toxics  activist  at 
Greei^ace,  says  many  manufacturers 
have  made  their  product  lines  more  en¬ 
vironmentally  friendly  in  just  the  past 
few  years. 

“We  have  significantly  greener  mo¬ 
bile  phones,  laptops  and  PDAs  than  we 


a-waati,  and  budgat  for  that  task, 
‘bi  a  lot  of  antsrprisst,  thara'k  no 
ona  porson  rssponsaila,  and  that's 
whan  tha  troubls  bagbia,’ says  Jbn 
O'Orady,  dirsctor  for  glohal  assal 
managaniantatHPFinaneialSar- 
vicasinMunayHII.NJ, 


top  eomputon,  a  movs  that  tfia  EPA 
ssthnaias  could  saws  you  S2S  to  STS 
porPCannualy. 


Cormack.) 

Fujitsu  has  also  developed  biode¬ 
gradable  plastics  that  have  less  of  an 
environmental  impact  than  traditional 
plastics,  which  are  harder  to  reuse 
than  other  components  of  electronic 
goods,  McCormack  says.  The  company 
has  used  biodegradables  in  certain 
notebook  PCs  since  2002.  And  in  2006, 
it  developed  a  flexible  bio-plastic  using 
castor  oil;  that  material  is  now  used  in 
PCs  and  cell  phones. 

TOXIC  OUT;  GREEN  IN 

Fujitsu’s  push  for  products  that  are 
environmentally  sound  from  inception 
through  disposal  exemplifies  the  grow¬ 
ing  design-for-environment  trend. 

Harrell  says  he  sees  manufacturers 
phasing  out  a  number  of  toxic  chemi¬ 
cals,  including  lead,  mercury  and 
cadmium.  Some  are  working  to  replace 
other  toxins,  such  as  PVC  and  BF^ 
with  materials  that  so  far  have  proved 
to  be  less  dangerous. 

However,  he  and  others  still  see 
room  for  improvement. 

A  February  2008  Greenpeace  report 


the  U.S.  is  unknown,  because  much  of  it 
is  still  sent  to  landfills  and  incinerators 
or  illegally  exported  for  dumping  in  Af¬ 
rica  or  ruffimentary  recycling  in  Asia. 

Harrell  says  mamifacturers  need  to 
do  more,  toa  For  instance,  Nintendo 
of  America  Inc.  in  Redmond,  Wash., 
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ranked  at  the  very  bottom  of  Green¬ 
peace's  electronics  guide.  Nintendo  did 
not  respond  to  requests  for  comment. 

To  be  fair.  Nintendo  isn't  the  only 
company  Greenpeace  cited  in  a  May 
report  called  “Playing  Dirty,”  which 
examined  the  use  of  hazardous  chemi¬ 
cals  and  materials  in  gaming  console 
components.  Greenpeace  looked  at 
Microsoft  Corp.'s  Xbox  360  Elite,  the 


1lOllS.At«wgyeHlssotrandti8pow 
sr  grid  gram  mon  and  mora  bwdwwd, 
cafqwidM  art  looUng  for  producta  that 
«nn1  coal  aa  naiGh  to  tun  or  raquba 
tham  to  saak  mors  pouMT  eapat^. 
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40GB  Sony  PlayStation  3  and  the  Nin¬ 
tendo  Wu.  It  didn't  detect  cadmium  or 
mercury  in  any  of  those  game  systems' 
components,  but  it  found  lead  and 
chromium  at  relatively  low  concentra¬ 
tions  in  some  samples  and  PVC  in  a 
number  of  flexible  materials  (wire  and 
cable  coatings)  in  all  of  the  consoles. 

Microsoft,  Nintendo  and  Sony  have 
committed  to  making  greener  prod¬ 
ucts.  According  to  the  Greenpeace 
report,  Microsoft  said  it  would  stop 
using  PVC  and  BFR  in  its  hardware  by 
2010,  Nintendo  said  it  would  eliminate 
PVC  in  its  products  but  has  not  com¬ 
mitted  to  a  date,  and  Sony  said  it  would 
phase  out  PVC  and  certain  uses  of  BFR 
in  its  mobile  products  by  2010. 


to  resource  efficiency,  environmental 
hazards  and  energy  efficiency.  The 
process  is  linked  to  the  company's 
quality  cenification  process,  which 
means  environmental  factors  are  con¬ 
sidered  part  of  product  quality. 

Samsung  incorporates  recycled  ma¬ 
terials  in  new  products  when  possible 
and  focuses  on  making  products  easier 
to  recycle.  It  has  simplified  screws  and 
fasteners  to  make  products  easier  to 
break  down  into  components,  reduced 
the  number  of  materials  used  in  order 
to  facilitate  material  separation,  and 
ensured  that  plastics  are  marked  in  ac¬ 
cordance  with  international  standards 
to  aid  recycling. 

Likewise,  Sun  Microsystems  Inc. 
thinks  about  disassembly  as  it  designs 
its  products,  making  sure  they  come 
apart  quickly  and  mostly  without  tools, 
according  to  Dermot  Duggan,  Sun’s 
director  of  eco-innovation  solutions. 
The  company  even  moved  ID  stickers 
from  plastic  parts  to  sheet  metal,  be¬ 
cause  clean  plastic  is  more  valuable  for 
recycling. 

Such  efforts  make  a  difference,  says 
Jake  Player,  president  of  TechUim  Inc., 
an  Austin-based  conqiany  that  recycles 
and  refurbishes  technology  equipment. 

“We’re  seeing  [manufacturers]  work 
with  us  on  how  to  make  the  computers 
easier  to  recycle,"  Hayer  says. 

For  example,  hard  drives  now  snap 
out,  and  chassis  snap  apart.  There’s 
less  use  of  metals  and  other  compo¬ 
nents  that  can't  easily  be  separated, 
and  there’s  more 
compatibility  of 


components  across 
the  manufacturers’ 
own  product  lines. 

Mayer  says  his 
company  can  re- 


ISTHATKEYBOMD 

TOXIC? 

Conoemsabout 


CUSTOMERS  ARE  WATCHmO 

ChiYoung  Oh,  environmental  products 
manager  at  Samsung  Electronics  Co. 
in  Seoul,  says  that  consumers  expect 
top  brands  to  have  high  environmental 
standards  and  that  corporate  custom¬ 
ers  want  to  know  about  green  pro¬ 
grams.  even  if  contracts  aren't  won  or 
lost  because  of  them. 

Samsung  has  a  number  of  initiatives 
it  can  show  to  customers.  Oh  said  in  an 
e-mailed  statement.  In  2004,  the  com¬ 
pany  introduced  a  formal  eco-design 
process  that  incorporates  attention 


furbish  and  resell 

80%  of  the  1  million  assets  it  handles 
annually.  Those  include  data  center 
equipment,  scanners,  fax  machines, 
phones,  docking  stations  and  computer 
speakers.  The  remaining  materials  can 
be  recycled. 

Today,  says  Player,  “manufactur¬ 
ers  are  designing  these  products  with 
[recyclers]  in  mind,  whereas  five  years 
ago  they  weren’t.”  ■ 

Pratt  is  a  Computerworld  contributing 
writer  in  Waltham,  Mass.  Contact  her  at 
marykpratt@verizon.net. 


I  SECURITY  MANAGER’S  JOURNAL  MATHIAS  THURMAN 


ASeculity  Roundup 
In  20  Minutes  Flat 


Our  manager  has  a  chance  to  make 
the  case  for  better  security  every 
quarter.  But  he  has  to  be  fast- 


:■  OU  RE  A  secu¬ 
rity  manager 
with  20  min- 


the  CIO  the  precise  state 
of  your  company’s  security 
posture.  You  need  to  dem¬ 
onstrate  that  things  have 
improved,  but  you  have  to 
m^e  it  clear  that  things 
could  be  even  better  if  you 
received  more  funding. 
The  CIO  and  his  staflf  are 

hearing  from  every  func¬ 

tional  unit  under  his  con¬ 
trol,  and  he’ll  be  extracting 
key  slides  for  when  be  goes 

on  to  make  a  similar  pre¬ 
sentation  to  the  CEO. 
How’s  that  for  pressure? 
’This  is  what  happens  ev¬ 
ery  quarter  in  my  compa¬ 
ny,  and  it’s  no  exaggeration 
to  say  that  those  presenta¬ 

tions  constitute  the  most 
important  80  minutes  of 


allotment,  but  from  time  to 
time,  my  role  is  modified, 
and  I  like  to  keep  everyone 
up  to  date. 

which  are  an  effective 
means  of  communicating 
the  level  of  information 
seciu-ity  we  are  achieving. 
When  IteU  the  CIO  and 
his  staff  the  percentage 
of  our  Windows  PCs  and 
servers  that  are  up-to- 
date  with  antivirus  and 
security  patches,  they  un¬ 
derstand  the  implications. 
They  know  that  there’s  a 

direct  correlation  between 

a  low  percentage  of  anti¬ 
virus  compliance  and  an 
increase  in  virus  incidents. 
And  having  been  through 
major  outbreaks  in  the 
past,  they  share  my  desire 
to  never  go  through  that 
mess  again. 

They  have  a  similar 


monitored  by  i 
detection  software  and 
data-loss  prevention  sen¬ 
sors,  or  when  I  tell  them 
how  closely  we’re  main¬ 
taining  our  environment 
to  a  known  baseline  con¬ 
figuration. 

Another  metric  of  great 
interest  is  the  percentage 
of  projects  that  gained  my 
approval  during  the  op- 


rather  than  late  in  the  proj¬ 
ect  life  cycle.  That  number 
has  been  rising,  showing 
that  IT  is  thinking  of  secu¬ 
rity  in  the  early  stages. 

Then  I  turn  to  my 
group’s  highlights  and 
lowlights.  One  highlight 
this  quarter  was  certainly 
our  success  in  data-loss 
prevention  and  how  that 
translates  to  return  on 
investment  (all  discussed 
in  more  detail  in  my  July 


TrouHe 

Ticket 


ny^  security  posture. 

MmONPUNiBeor- 


and  ask  for  money. 


additional  head  count. 
Another  lowlight  this 
quarter  was  a  nudge  di¬ 
rected  at  the  CIO  himself, 
as  I  communicated  my 
frustration  that  some  poli¬ 
cies  1  had  updated  had  yet 
to  be  ratified  by  him. 

And  then  there’s  the 
budget,  which  is  always  a 
lowlight.  Without  proper 
funding,  it’s  difficult  to 


tablished  road  maps,  since 
I  have  to  spend  time  and 
energy  seeking  commit¬ 
ments  from  other  business 


I  conclude  with  a  heads- 
up  slide,  which  I  also  refer 
to  as  “Watch  out,  here  it 
comes.”  This  quarter,  I 
revealed  some  of  the  find¬ 
ings  from  a  recent  security 
assessment  we  had  done 
as  part  of  an  acquisition. 
’Then  I  had  to  give  ev¬ 
eryone  a  heads-up  about 
employees’  increased 
use  of  mobile 

devices,  particu-  IHI^H 

iarlyilffiones.  OJOMM 

Employees  are 

discovering  all  ■  otrealmn) 

sorts  of  new 

ways  to  connect 

these  devices  to  our  net- 


the  year  for  me.  I  think  of 
my  20  minutes  each  quar¬ 
ter  as  my  opportunity  to 
present  our  security  State 
of  the  Union. 

I  divide  my  presentation 
into  several  sections.  The 
first,  a  review  of  my  role  in 
the  company,  takes  only  a 
couple  of  minutes.  It  might 
seem  like  a  waste  of  some 
of  my  precious  20-minute 


understanding  when  I  tell 
them  the  percentage  of 
our  network  that’s  being 

MTTiosefour 
quartBfIy  presen¬ 
tations  constHute 
the  most  important 
SOmimitBSofthe 
year  for  mo. 


21  column).  But  I  also  had 
successes  in  obtaining 
funding  for  a  secure  FTP 
project  and  in  getting  se¬ 
curity  embedded  into  the 
project  life-cycle  manage- 

One  lowlight  was  related 
to  one  of  the  highlights:  It’s 
difficult  to  properly  oper¬ 
ate  the  data-loss  preven¬ 
tion  infrastructure  without 


My  message:  “Watch 
out,  here  comes  a  new 

This  week's  journal  is  writ¬ 
ten  by  a  real  security  man¬ 
ager.  nUUnThsmimr 
whose  name  and  employer 
have  been  disguised  for  ob¬ 
vious  reasons.  Contact  him 
atmathias_thurman@ 
yahooxom. 
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i  ■OPINION 

I  Cilen 


Fostering 

Accounlibility 


DW  DO  I  make  my  people  more  accoimtable?”  As 
a  management  consultant,  I  get  this  question  all 
the  time.  In  fact.  I’d  have  to  say  that  in  general, 

;  people  more  accountable  is  one  of  the  top 
aspirations  of  technical  managers.  So  it’s  worth  answering  the 
question  here  are  simply  as  I  can. 


Here  it  goes:  You  can’t 
make  your  people  account¬ 
able.  Get  over  it  It’s  that 
simple. 

Here’s  what  you  can  do; 

■  Threaten  them. 

■  Bully  them. 

■  Micromanage  them. 

■  Beg  them. 

■  Offer  them  incentives. 

■  Praise  them. 

But  none  of  these  things 


The  list  can  go  on  and  on, 
but  it  won’t  get  you  to  ac¬ 
countability. 

The  problem  is  not 
that  we  managers  lack 
the  creativity  and  en¬ 
ergy  required  to  make 
people  accountable.  It’s 
that  accoimtability  isn’t 
something  that  manag¬ 
ers  can  mandate.  It’s  not 
something  managers  can 
enforce.  It’s  something 
that  subordinates  feel.  It’s 
a  mental  and  emotional 
state,  not  some  condition 
that  managers  impose. 
There’s  no  magic^  for¬ 
mula  for  making  anyone 
feel  this  way. 

So  how  does  it  happen? 
Real  accountability  occurs 


when  employees  believe 
these  things; 

■  Their  work  matters. 

■  They  have  substantial 
control  over  their  ability  to 
succeed  or  fail. 

■  The  quality  and  time¬ 
liness  of  the  work  is  im- 

■  The  rewards  and  con¬ 
sequences  that  result  from 
their  work  are  fair. 

■  They  have  reasonable 
influence  on  the  evaluation 
of  their  work. 

A  manager’s  ability  to 
make  someone  feel  these 
things  is  extremely  limited. 
But  knowing  that  they  can 
influence  some  feelings, 
managers  sometimes  try 
to  enforce  accountability 
by  manipulating  people’s 
emotions.  So  how  can  you 
as  a  manager  try  to  foster 
certain  feelings  in  your 
subordinates?  Here  are 


must  choose 


And  you  can't  force 
them  to  do  so. 


some  things  you  can  do: 

■  Try  to  make  them 
frightened. 

■  Tty  to  make  them  feel 
intimidated. 

■  Make  them  feel  that 
you  mistrust  their  abilities 
and/or  motives. 

■  Encourage  them  to  feel 
more  powerful  than  you. 

■  Encourage  them  to  be 
greedy. 

■  Try  to  make  them  feel 
loved  and/or  respected. 

But  none  of  these  emo¬ 
tions  engenders  genuine 
accountability,  and  few  of 
them  would  qualify  as  pro- 

Employees  must  choose 
accountability.  You  can 
offer  it,  but  they  must  de¬ 
cide  whether  to  accept  it 
And  you  can’t  force  them 
to  do  so.  The  best  you  can 
do  is  to  try  to  create  an  en¬ 
vironment  that  encourages 
them  to  make  that  choice. 
Here’s  how: 

■  Communicate  the  im¬ 
portance  of  work. 

■  Structure  woilc  to  give 
people  control  over  their 
own  success. 

■  Recognize  and  reward 


outstanding  work. 

■  Ensure  that  rewards 
and  consequences  are  con¬ 
sistently  and  fairly  meted 
out  and  are  proportional  to 
success  or  failure. 

■  Take  reasonable  ex¬ 
tenuating  circumstances 
into  account 

■  Structure  work  in 
such  a  way  that  people 
owe  things  to  one  another 
rather  to  the  supervisor. 

But  again,  you  can  only 
encourage  them  to  choose 
accountability;  you  can’t 
mandate  that  choice. 

Even  now.  I  can  hear  your 
protest:  “I  can  discipline 
people  if  they  screw  iqj.” 
True,  but  even  if  done  well, 
discipline  is  only  one  means 
of  engendering  account¬ 
ability.  It’s  not  the  whole 
enchilada.  More  important, 
an  employee  who  really 
feels  accountable  punishes 
herself  for  a  failure  more 
than  you  can  punish  her. 
Trying  to  make  geeks  feel 
things  tends  to  be  counter¬ 
productive.  We  don’t  like 
to  be  manipulated. 

So  give  up  on  that  dream 
of  making'people  account¬ 
able,  and  start  thinking 
about  how  you  can  make 
accountability  a  compel¬ 
ling  offer.  An  invitation 
is  the  best  you’re  going  to 
be  able  to  muster.  Make  it 
enticing.  ■ 

Paul  ehn  is  tfte/bunder  o/ 
the  GeekLead^.com  Web 
community  and  author  of 
the  award-winning  book 
Leading  Geeks:  How  to 
Manage  and  Lead  People 
Who  Deliver  Technology 
(Jossey-Bass,2003). 

Contact  him  at  in/b@ 
paulgien.com. 
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MARKETPLACE 


Has  your  power  hungry  data  center 
become  a  G  to  manage? 


Have  puwer  hiiiu|ry  racks  ol  IT  iMiiiipmuiU  created  a  monstrous 
envirniimont  in  your  data  center"’  Are  yon  runnmii  not  ol  power 
capacity  before  rack  space"’ 

Eaton  offers  a  foil  fine  of  hiph  density  power  solutions  to  soothe 
the  monster  in  your  data  center 


Are  ynii  ready  to  take  control  ’ 

WWW  powerware  coni  t'PDU  877  785  4994 


F:T*N  Powerware 

/V  /  //// 


as  having  been 'stung 
by  a  narcissist'  and  shared  books 
and  Web  sites  with  her  on  the  topic. 
Now.  besides  being  the  IT  support 
services  manager  at  Mystic  Lake 
Casino  Hotel  in  Ptior  Lake.  Minn.. 
Ritala  educates  and  coaches  others 
on  how  to  deal  with  narcissists. 

for  attention  and  admiration  and  a 
lack  of  concern  for  others.  But  are 
theydangerousinthe  workplace? 

'The  cost  to  organaations  from 
narcissism  in  the  workplace  is 
staggering.' as  the  narcissist  s 
co-workers  become  ill  with  stress, 
teamwork  deteriorates,  projects  fail 
and  turnover  rises,  says  Ritala. 

‘Up  to  one-third  of  a  narcissist's 
victims  in  the  workplace  will  quit 
the  company  or  transler  to  another 
department  If  nothing  is  done'  to 


address  the  behavior,  she  says. 

Once  she  had  become  educated 
on  the  topic  of  narcissism.  Ritala  be¬ 
gan  to  recognize  narcissistic  traits 
in  the  workplace.  Feeling  that  it  is 
a  problem  that  is  pervasive  but  too 
often  ignored,  she  and  management 
consultant  Gerald  Falkowski  wrote 
a  booklet  on  the  topic,  called  Narcis¬ 
sism  in  the  Workplace  (Red  Swan 
Publishing  USA.  2007). 

Ritala.  former  president  of  the  IT 
Service  Management  Forum  -  U.S.. 
spoke  recently  with  Compuletwotfd 


service  such  as  counetna  Some 
narcsssts.  when  conhonted.  can 
see  how  ihev  behavn  e  nipactvig 
staff  and  the*  own  performaice 
infT  HtheycanXIAhaslocalmtypiiy 
back  whal  they  (td  And  you  must 


more  competitive  than  some  parts  of  areenprowigorgennQenrs 

the  business,  so  yes.  But  people  are  people's  behfMvpMnstyi 

getting  educated.  Five  years  ago.  |  donT  change  latestcygMhe^ 

few  people  knew  about  narcissEm  |  or  become  enit^eaned  And  once  a 
Now  there  ate  onbnediscussan  narossEt  sbehavasareobaamad 

groups  which  deal  wdh  the  lope  anddoomoMldeycanbi 

And  the  dynanacs  of  the  workforce  even  more  auel  and  oetaroM 

have  chaiiged  so  that  narcssst  per  {  tiey  no  longer  can  Me  tat  I 
sonaWes  ate  standing  out  more.  <  asandrtandatanan 


COMPUTERWORIO  AUGUST  4. : 


Feefing  Secure? 

Pilot  fish  keeps  his  nMMwy  in 
a  small  bank  that  marges  with 
a  slightly  larger  one,  and  he's 
notihed  that  hell  have  to  visit 
the  bank  in  person  to  activate 


ShariSBnk 

money  trying  to  hx  the  prob¬ 
lem,  with  no  success.  After 
threemonthswithnoan- 

and  quiddy  lots  something 
down  on  a  scrap  of  paper, 
which  she  hands  to  him. 
What’s  this?  Ash  asks.  ‘Your 

TRUE  TALES  OF  IT  LIFE  AS  TOLD  TO  SHARKY 

If  S  Academic!  ;  the  airflow  proUem. ‘Faculty 

Computaranginaeringdapar^  1  member  said,  as  he  stormed 
mant  at  this  big  university  |  out  of  the  room, ‘If  you  know 

one  day  noticed  a  bright  spot 
of  light  ptaying  across  the 
front  of  the  tape  drives.  The 
light  beam  was  coming  from 
the  building  across  the  street, 
one  floor  above  him.  Turns  out 
a  computer  operator  hred  four 

new  passward,‘  teller  says. 
Stunned  Ash  asks  if  she  realy 
knows  everyone’s  password. 
Dh.  they’re  all  the  same,'  she 
says.  You’re  kidding,  right? 
gulps  Ash. ‘It’s  0K.‘ she  tells 
him, ‘you  can  change  it  to 

ing.  and  one  faculty  member 
decides  that  his  grtsi  students 
can  lay  out  the  server  room 
batter  than  the  department’s 

IT  people.  When  the  students 
are  done,  faculty  guy  gives 

says  fish.  Department  chair 
told  me  to  make  fixing  the 
roomatoppriotity.' 

Aha! 

Flash  back  to  the  mid-1980s. 

ing  across  the  street  She 
periodically  went  bito  the  rest¬ 
room,  opened  a  window  and 
used  a  small  mirror  to  reflect 
a  narrow  beam  of  sunlight 
across  the  tape  drives,  which 

palled  Ash,  “1  rushed  home, 
changed  my  password  -  and 
then  went  back  out  to  open 
an  account  with  a  different 
bank.’ 

IT  professionals  unite! 


Introducing  the  new 


The  NEW  ITworld  offers  active  members  of  the  IT  industry  a 
unique  atmosphere  for  information  sharing.  Unlike  most  IT  sites 
that  push  content  to  visitors,  this  site  is  set  up  as  an  "open 
exchange"  that  allows  IT  professionals,  technology  vendors, 
and  other  industry  luminaries  to  all  participate  in  creating 
content  around  the  topics  that  mean  the  most  to  them. 


www.ITworld.com 


■  FRANKLY  SPEAKING 

Frank  Hayes 

Cryptic  Reading 


laptops,  portable  drives 
and  BlackBerries.  And  it’s 


Encryption  is  hard.  Case  in  point:  the  U.S.  gov¬ 
ernment,  which  requires  its  agencies  to  encrypt  all 
sensitive  data  on  laptops  and  mobile  devices.  But  ac¬ 
cording  to  the  Government  Accountability  Office,  as 
of  last  year,  70%  of  such  devices  didn’t  encrypt  —  and  the  oth¬ 
er  30%  weren’t  in  great  shape  either  (see  story,  page  4). 


The  GAO  just  released 
a  report  that  audited  24 
agencies  and  depart¬ 
ments  for  their  mobile 
encryption  implementa¬ 
tions.  It  included  trouble 
spots  like  the  Depart¬ 
ment  of  Veterans  Af¬ 
fairs,  which  in  2006  lost 
a  laptop  containing  the 
personal  information  of 
26  million  vets  and  mili¬ 
tary  personnel,  and  the 
Commerce  Department, 
which  has  lost  more  than 
1,000  laptops  since  2001. 

You  already  know  the 
headline  conclusion:  At 
the  time  of  the  audit,  June 
to  September  2007,  more 
than  two-thirds  of  the 
mobile  devices  in  these 
24  agencies  weren't  using 
encryption  at  all 

But  that’s  not  the  inter¬ 
esting  part  The  GAO  also 
found  that  in  many  cases, 
even  the  devices  believed 
to  be  encrypted  had 
problems.  Sometimes  the 
encryption  wasn’t  actu¬ 
ally  installed.  Or  it  wasn’t 
configured  correctly.  Or 
it  hadn’t  been  turned  on. 


Often,  users  hadn’t  been 
trained,  sensitive  infor¬ 
mation  hadn’t  been  in¬ 
ventoried,  and  crypto  key 
control  procedures  hadn’t 
been  established. 

You  can  read  the  gory 
details  by  downloading 
the  report  (it’s  on  the  Web 
at  wwwffio^/new.items/ 
d08525.pdf).  The  real  hor¬ 
ror  stories  start  on  page  29. 

(Predownload  quiz; 
Guess  which  department 
hadn’t  installed  encryp¬ 
tion  on  any  laptops,  even 
though  officials  insisted 
that  it  had?  Guess  which 
hotshot  technical  agency 
said  it  had  no  way  of  tell¬ 
ing  whether  encryption 
software  had  been  suc¬ 
cessfully  installed  on  a 
laptop?  And  guess  which 
department’s  employees 
never  used  encryption 


■  Guess  which 
department  hadn’t 
instaled  encryp¬ 
tion  on  amrlaplops, 

aiofhcialsm- 
thatRhad? 


becatise  no  one  told  them 
it  was  installed?) 

Even  if  you  don’t  care 
about  the  dirt  turned  up 
by  the  audit,  you  should 
download  the  report  It  in¬ 
cludes  a  remarkably  read¬ 
able  crib  sheet  on  the  dlf- 
fiaent  types  of  encryption 
for  mobile  device  hard 
disks  (full  disk,  file,  folder, 
virtual  disk),  communica¬ 
tions  (VPNs,  digital  sig¬ 
natures  and  certificates) 
and  handheld  devices. 

It  also  gives  a  good 
rundown  of  the  cat¬ 
egories  of  problems  the 
agencies  ran  into  with 
their  encryption  efforts, 
as  well  as  a  table  listing 
the  actual  volume  pricing 
that  government  agencies 
are  getting.  (One  nice 
non-horror  story  from 
the  report:  The  Depart¬ 
ment  of  Agriculture  cut 
its  own  deal  for  180,000 
encryption  licenses  at 
$9.63  each,  way  below 
even  the  best  government 
price  schedule.) 

In  short,  it’s  a  useful, 
practical  overview  of 


based  on  real-world  expe¬ 
rience  —  even  if,  for  most 
government  agencies, 
that  experience  hasn’t  yet 
translated  into  success. 

Why  do  you  care?  Be¬ 
cause  encryption  is  hard. 
And  encryption  is  coming 
to  portable  devices  near 
you.  Whether  because  of 
regulations,  lawsuits  or 
common  sense,  soon  or 
late  you’ll  be  doing  this  in 
your  IT  shop. 

The  more  you  learn 
now  about  someone  else’s 
foul-ups,  failures  and  dead 
ends,  the  better  you’ll 
be  able  to  avoid  them. 
And  as  long  as  your  tax 
dollars  are  being  spent 
on  these  mistakes,  you 
might  as  well  get  some 
value  from  the  exercise. 

Besides,  what  other  re¬ 
port  that  you  browse  this 
year  will  tell  you  how  the 
State  Department  dodged 
its  audit:  “Although  the 
inventory  provided  by 
the  agency  indicated 
that  the  employees  were 
assigned  to  the  location 
that  we  visited,  they  were 
actually  assigned  to  posts 
throughout  the  world.” 

Happy  summer 
reading.* 

(rank  ItayM  is  Computer- 
world’s  senior  news 
columnist  Contact  him 
atfrank_hayes@ 
computerworld.com. 
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MICROSOFT  SYSTEM  CENTER.  DESIGNED  FOR  BIG. 


Microsoft  System  Center  is  a  family  of 
IT  management  solutions  (including  Opeiations 
Manager  and  Systems  Management  Server) 
designed  to  help  you  manage  your  mission- 
critical  enterprise  systems  and  applications 


Carnival  Cruise  Lines  manages  1,000  shipboa'd 
and  land-based  servers  with  System  Center  That 
big.  See  Carnival  Cruise  Lines  and  other  case 
studies  at  DesignedForBig.com 

Microsoft 

System  Center 


